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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 



1. (Currently Amended) A method of controlling access to a computer system, comprising; 

receiving a request to log into the computer system; 

determining if a smart card is being used as a part of a login protocol to log in to the 
computer system; 

if the smart card is being used s e, permitting use of the computer system based on access 
restrictions embedded on the smart card and logging use of the computer for the 
user associated with the smart card; and 

if the smart card is not being used ft ei permitting use of the computer system and logging 
use of the computer system to an unknown user. 

2. (Original) The method according to claim 1, further comprising setting an alert when use of 
the computer system is permitted and logged to an unknown user. 

3. (Original) The method according to claim 2, wherein the alert comprises changing a visual 
appearance of an icon. 

4. (Original) The method according to claim 2, further comprising clearing the alert if the user 
associated with the smart card has rights to clear alerts when the smart card is being used as a 
part of the login protocol. 

5. (Original) The method according to claim 1, further comprising determining an access 
restriction associated with a user associated with the smart card and permitting use of the 
computer system subject to the access restriction when the smart card is being used as a part 
of the login protocol. 

6. (Original) The method according to claim 5, further comprising denying access to the 
computer system when the access restriction is not met. 

7. (Original) The method according to claim 5, wherein the access restriction comprises 
restriction of time of day that use of the computer system is permitted. 
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8. (Original) The method according to claim 5, wherein the access restriction comprises 
restriction of computer programs that can be executed on the computer system. 

9. (Original) The method according to claim 1, further comprising: 

setting a timer to measure a time period whenever use of the computer system is 
permitted; 

resetting the timer when the computer system is actively being used; and 
carrying out an automatic logout when the computer system has not been actively used 
during the time period. 

10. (Original) The method according to claim 1, further comprising permitting initialization of a 
smart card if the user associated with the smart card has rights to initialize a smart card, when 
the smart card is being used as a part of the login protocol. 

11. (Original) The method according to claim 10, wherein the initialization further comprises 
establishing access restriction for a user of the smart card. 

12. (Original) The method according to claim 1, wherein the use logging comprises making 
entries into a log file of a user name, time and date of the computer system use. 

13. (Original) The method according to claim 12, wherein the use slogging further comprises 
making entries into the log file of computer programs accessed. 

14. (Original) A computer readable storage medium storing instructions that, when executed on a 
programmed processor, carry out the method according to claim 1 . 

15. (Currently Amended) A method of controlling access to a computer system, comprising: 

receiving a request to log into the computer system; 

determining if a smart card is being used as a part of a login protocol to log in to the 
computer system; 

if the smart card is being used s e, permitting use of the computer system based on access 
restrictions embedded on the smart card and logging use of the computer for the 
user associated with the smart card; and 

if the smart card is not being used s et permitting use of the computer system and logging 
use of the computer system to an unknown user; 
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setting an alert by changing a visual appearance of an icon when use of the computer 

system is permitted and logged to an unknown user; 
determining an access restriction associated with a user associated with the smart card 

and permitting use of the computer system subject to the access restriction when 

the smart card is being used as a part of the login protocol; 
denying access to the computer system when the access restriction is not met; 
setting a timer to measure a time period whenever use of the computer system is 

permitted; 

resetting the timer when the computer system is actively being used; and 

carrying out an automatic logout when the computer system has not been actively used 

during the time period; and 
wherein the use logging comprises making entries into a log file of a user name, time and 

date of computer system use. 

16. (Currently Amended) A computer system having an access control system, comprising: 

a central processor; 

a smart card reader accessible by the central processor; 
a security program running on the central process that: 

determines if a smart card is being used as a part of a login protocol to log in to 

the computer system; 
if the smart card is being used s e, permitting use of the computer system based on 
access restrictions embedded on the smart card and logging use of the 
computer for the user associated with the smart card; and 
if the smart card is not being used net, permitting use of the computer system and 
logging use of the computer system to an unknown user. 

17. (Original) The apparatus according to claim 16, wherein the security program further sets an 
alert when use of the computer system is permitted and logged to an unknown user. 

18. (Original) The apparatus according to claim 17, wherein the alert comprises changing a 
visual appearance of an icon. 

19. (Currently Amended) The apparatus according to claim 17, wherein the security program 
further determines an access restriction associated with a user associated with the smart card 
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and permits use of the computer system subject to the access restriction when the smart card 
is being used as a part of the login protocol[[;]] A and denies access to the computer system 
when the access restriction is not met. 

20. (Original) The apparatus according to claim 17, wherein the security program also: 

sets a timer to measure a time period whenever use of the computer system is permitted; 
resets the timer when the computer system is actively being used; and 
carries out an automatic logout when the computer system has not been actively used 
during the time period. 

21. (Currently Amended) The a pparatus method according to claim 17, wherein the use logging 
comprises making entries into a log file of a user name, time and date of computer system 
use. 



